Your "Notice" Is Missing: Detecting and Fixing Violations of Modification Terms in Open Source Licenses during Forking
Kaifeng Huang, Yingfeng Xia, Bihuan Chen, Siyang He, Huazheng Zeng, Zhuotong Zhou, Jin Guo, Xin Peng
Abstract
Open source software brings benet to the software community but also introduces legal risks caused by license violations, which result in serious consequences such as lawsuits and nancial losses. To mitigate legal risks, some approaches have been proposed to identify licenses, detect license incompatibilities and inconsistencies, and recommend licenses. As far as we know, however, there is no prior work to understand modication terms in open source licenses or to detect and x violations of modication terms. To bridge this gap, we rst empirically characterize modication terms in 48 open source licenses. These licenses all require certain forms of "notice" to describe the modications made to the original work. Inspired by our study, we then design LV to automatically detect and x violations of modication terms in open source licenses during forking. Our evaluation has shown the eectiveness and eciency of LV. 18 pull requests for xing modication term violations have received positive responses. 8 have been merged. CCS Concepts • Software and its engineering ! Software libraries and repositories; Software conguration management and version control systems; Software evolution; Software maintenance tools.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 90e37e54-1da7-4253-8615-9b764af7f53cBuilds on6
- Identifying Open-Source License Violation and 1-day Security Risk at Large ScaleRuian Duan, Ashish Bijlani, Meng Xu, Taesoo Kim et al.CCS 2017 · 126 citations
- Towards Understanding Third-party Library Dependency in C/C++ EcosystemWei Tang, Zhengzi Xu, Chengwei Liu, Jiahui Wu et al.ASE 2022 · 64 citations
- Tracking patches for open source software vulnerabilitiesCongying Xu, Bihuan Chen, Chenhao Lu, Kaifeng Huang et al.FSE 2022 · 34 citations
- How has forking changed in the last 20 years?: a study of hard forks on GitHubShurui Zhou, Bogdan Vasilescu, Christian KästnerICSE 2020 · 33 citations
- REPFINDER: Finding Replacements for Missing APIs in Library UpdateKaifeng Huang, Bihuan Chen, Linghao Pan, Shuai Wu et al.ASE 2021 · 14 citations
Related papers
- LiResolver: License Incompatibility Resolution for Open Source SoftwareSihan Xu, Ya Gao, Lingling Fan, Linyu Li et al.ISSTA 2023 · 6 citations
- Small Changes, Big Trouble: Demystifying and Parsing License Variants for Incompatibility Detection in the PyPI EcosystemWeiwei Xu, Hengzhi Ye, Kai Gao, Minghui ZhouICSE 2026 · 1 citation
- Understanding and Remediating Open-Source License Incompatibilities in the PyPI EcosystemWeiwei Xu, Hao He, Kai Gao, Minghui ZhouASE 2023 · 13 citations
- LiSum: Open Source Software License Summarization with Multi-Task LearningLinyu Li, Sihan Xu, Yang Liu, Ya Gao et al.ASE 2023 · 4 citations
- Licoeval: Evaluating LLMs on License Compliance in Code GenerationWeiwei Xu, Kai Gao, Hao He, Minghui ZhouICSE 2025 · 6 citations
